Two things, can you confirn the model of controller you are using? As well, is the RAP properly whitelisted and your VPN configuration complete to permit the inbound IPsec connection?
Please bear in mind that with the release of ArubaOS 6.2.x - there was a capacity change on the 620 Series controller, so if you are using it - would explain the 'inactive/unlicensed' IL flags.
<snip>
A6xx series – staring with AOS 6.2 the Remote AP limits on the 6xx series will be the same as the Campus AP limits.
620 – 8 CAPs = 8 RAPs
650 – 16 CAPs = 16 RAPs
</snip>